Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: vKjSrmx5nc/EZCdFn4ko0Vm7T+l88k1af6KGaxzeB6g=
Subject key identifier: FC:58:AF:6E:2A:DC:6B:EF:1E:FD:DE:58:0C:BE:03:18:2F:61:93:D0
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 019A7293BA0C0F7BF49C23B9F109FAE165C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 1236
Signing time: Tue 11 Nov 2025 11:01:15 +0000
Manifest this update: Tue 11 Nov 2025 11:01:15 +0000
Manifest next update: Wed 12 Nov 2025 11:01:15 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: Zq6frl+7hfHEeeYVltWi1QfA5GZTzar5b1d8l3w5iAI=)
2: Zbhs7ceORmznv_4uvlnuPbBDx_c.roa (hash: MJdiewY9l3NAhxc3ZEXNNrBUcBcVMuNcqhqsZh7jqig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ba:0c:0f:7b:f4:9c:23:b9:f1:09:fa:e1:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Nov 11 11:01:15 2025 GMT
Not After : Nov 12 11:01:15 2025 GMT
Subject: CN=fc58af6e2adc6bef1efdde580cbe03182f6193d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:53:0d:4d:1f:71:d4:04:08:87:a7:0c:72:
f8:38:78:19:93:8a:82:7f:e2:53:66:ff:c0:24:33:
38:ad:8f:0c:65:2e:60:90:f4:c0:9d:3a:0f:a1:8c:
86:59:3b:51:54:b2:c2:89:37:1e:08:da:fb:a1:ef:
d9:84:e0:21:2f:c9:f4:d7:ca:88:19:ca:d9:50:89:
70:33:9b:ac:4f:eb:15:03:07:95:81:7e:41:b8:7a:
a1:f1:0b:86:e6:06:d8:70:4d:6c:98:26:bc:6a:10:
7f:86:10:b7:80:d1:ed:42:69:4a:75:8f:10:0a:00:
06:6b:e1:00:25:8b:35:af:99:fb:a8:ae:a2:a9:43:
14:94:44:21:b1:3e:64:9b:74:90:3e:c5:3b:35:f5:
26:9c:55:aa:09:9b:04:b7:88:c0:bf:97:64:c0:51:
13:0c:25:29:55:bf:03:88:93:1f:38:5c:4e:c3:e7:
f2:1c:2a:4e:8e:5c:ad:72:90:ae:27:40:c8:f8:1a:
8b:0b:65:51:4f:48:b7:68:f2:a1:dd:2f:5d:7a:37:
c1:e8:e5:1e:67:03:4d:08:20:47:3e:fc:28:ca:d6:
4c:b1:43:08:01:f5:03:27:2e:29:0d:35:6a:64:38:
dc:31:64:58:23:3c:89:0c:1f:bd:5b:ba:1d:6c:1d:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:AF:6E:2A:DC:6B:EF:1E:FD:DE:58:0C:BE:03:18:2F:61:93:D0
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:74:b7:66:3c:4c:ed:80:91:33:7b:73:ea:b2:c0:69:de:f0:
23:8d:61:2f:94:b5:7d:da:2e:29:3e:c9:29:e7:9e:e1:d3:a5:
a3:77:eb:e9:f5:e9:ba:66:ad:40:4e:c9:53:e0:15:aa:fb:f5:
ab:98:45:4c:fd:e3:61:12:19:53:3f:55:65:de:86:ed:89:23:
28:19:5c:49:c7:a5:20:ed:d1:3a:ca:11:ec:36:eb:5a:4b:45:
6d:4c:59:0d:bb:f7:9c:1e:56:b1:c1:03:53:41:ac:9d:35:45:
d6:29:5b:fe:dd:a4:62:1e:54:e6:f1:a2:ec:ca:aa:5b:46:ec:
26:dd:bb:c9:6f:77:57:3c:a9:8b:90:fe:b3:d8:8f:2b:2c:28:
89:56:92:9b:2f:78:e9:6a:eb:12:97:04:51:0f:fc:a1:1e:94:
28:29:70:7d:d7:d4:69:77:72:32:3b:bb:f3:57:fa:e4:1a:76:
ad:55:8c:5f:a7:29:d8:2b:21:07:93:37:bb:3d:3b:67:b0:05:
15:25:7a:10:ad:d6:8f:ed:02:1b:3a:7c:5d:c8:02:10:cc:e2:
2f:8c:b4:c9:ec:3c:3c:2a:44:00:c9:db:94:31:5d:fc:94:93:
ad:27:9d:fd:cb:36:49:73:3f:ca:b8:30:e0:6c:06:00:00:76:
04:02:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:37 2025 by rpki-client